Data theft stories
Victims are being pressured by increasingly convincing calls as scam losses across Australia hit AUD $2.18 billion in a year.
Financial, healthcare and public-sector organisations face less immediate pressure after a disruption effort hit a phishing network sending more than 1 billion malicious messages.
Attackers are exploiting trusted identities and collaboration tools to steal data and extort victims, leaving defenders with only brief windows to react.
The bust seizes 187 laptops in Texas and exposes a remote hiring fraud that infiltrated more than 70 US companies, officials said.
Data theft is now driving ransom demands, with average payments rising and attackers increasingly targeting senior staff at exposed companies.
Attackers turned a newly disclosed Gitea flaw into automated intrusions within days, hitting systems in five countries and exposing source code and secrets.
The stealer's use of typosquatted npm packages has raised fears that bug bounty channels are being abused to monetise stolen developer data.
Defenders now have minutes, not hours, as attackers use agentic AI to automate credential theft, scanning and extortion across live operations.
Attackers are compressing intrusions into hours, leaving defenders less time to spot and stop credential-harvesting campaigns.
Families across Asia-Pacific are being lured by fake grants, scholarships and delivery alerts as scammers exploit rising education costs and AI tools.
More groups are now driving attacks, leaving victim numbers flat even as ransomware operations reached a record 93 active crews in the quarter.
Organisations still miss most stealthy intrusions after logins, as Picus found only 14% of simulated attacks triggered alerts and exfiltration defence was 7%.
Industrial firms face growing disruption as ransomware incidents rose 12% to 1,140 in the second quarter, Dragos said.
By blocking stolen-logins abuse at file level, the new feature aims to curb both data theft and ransomware even after an account is compromised.
Google says the campaign is shifting towards financial and legal firms, with rebranded extortion sites still stealing cloud logins and tokens.
Undisclosed attacks now dominate ransomware activity, with 2,027 incidents logged in the quarter and data theft reported in 97% of disclosed cases.
Boards are being urged to beef up defences as AI tools may soon help criminals automate attacks and target New Zealand organisations more precisely.
New Zealand users risk fake login pages and scam sites after ChatGPT search results were found pointing to unsafe links and downloads.
Most Canadians want tighter fraud controls as the new Real-Time Rail could leave less time to block deepfake-driven scams and impersonation.
Defenders facing faster credential theft and account takeovers now have a free, hands-on way to practise dark web intelligence before an incident escalates.